Kelp DAO Disputes LayerZero's Account of $290 Million Exploit, Citing Default Settings as Primary Cause

A recent cryptocurrency exploit has sparked a heated debate, with Kelp DAO and LayerZero presenting differing accounts of the events leading up to the $290 million disaster. According to a source familiar with the matter, Kelp DAO is set to challenge LayerZero's post-mortem analysis, which placed the blame on Kelp's alleged failure to heed warnings about its single-verifier setup. Kelp, a liquid restaking protocol, claims that the compromised decentralized verifier network (DVN) was actually part of LayerZero's own infrastructure, not a third-party entity. The protocol asserts that it relied on LayerZero's documentation and default settings when configuring its setup. Security researchers have also questioned LayerZero's narrative, with one expert noting that the company's reference setup ships with single-source verification defaults across major chains. The incident has led to a wider discussion about the security risks associated with single-verifier configurations and the need for greater transparency and accountability in the cryptocurrency space. As the situation continues to unfold, both Kelp DAO and LayerZero have pledged to work towards enhancing security measures and providing a more accurate account of the events surrounding the exploit.